Here is an example of what NTConfig.POL looks like ...

[Richard Sharpe]

Hi,

Now that editreg is displaying enough info here is an example of what 
NTConfig.POL looks like:

\AdminConfigData\Computers\.default\Software\Microsoft\Windows\CurrentVersion\Run
  SECURITY
    Owner: S-1-5-32-544
    Group: S-1-5-21-1988699175-926296742-1295600288-513

Clearly, the root key in \AdminConfigData for an NTConfig.POL file, while 
NTUSER.DAT has a root key of \$$$PROTO.HIV :-)
 
Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com